You know that Directory Server uses a plug-in to check Barbara’s
password during the bind. Thus, Directory Server must have used the XOR
plug-in because you saw that Barbara’s password was XOR-encoded. If
the whole process appears to work, you can conclude that the compare function
works, too.